From 366869a8a48d01f6dc1fc28ac6d5b7a2057894fa Mon Sep 17 00:00:00 2001
From: Patrick Mulligan <patjmulligan@protonmail.com>
Date: Mon, 30 Mar 2026 18:31:08 -0400
Subject: [PATCH] fix(deploy): add --refresh flag to auto-upgrade
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Without --refresh, nix caches the flake evaluation and
nixos-upgrade may not pull the latest commits. The --refresh
flag forces re-fetching the git repo on every upgrade.

Only affects flake evaluation cache — /var/lib data is untouched.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
---
 flake.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/flake.nix b/flake.nix
index 05bbc81..7196d84 100644
--- a/flake.nix
+++ b/flake.nix
@@ -148,6 +148,7 @@
               system.autoUpgrade = {
                 enable = true;
                 flake = "git+ssh://forgejo@git.atitlan.io/aiolabs/lamassu-next.git#${machineModel}-installed";
+                flags = [ "--refresh" ];
                 dates = "04:00"; # daily at 4am
                 allowReboot = false;
               };